TI-2012-04693 CVE-2012-5577 · GHSA-p86x-652p-6385
Python keyring lib before 0.10 created keyring files with world-readable permissions.
Priority LOW 37
Python keyring lib before 0.10 created keyring files with world-readable permissions.
python-pillow
Records319All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high143CVSS 7.0–8.9
Exploited now
python-pillow records in CISA KEVNo python-pillow vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Keyring · all components
TI-2012-04694 CVE-2012-5578 · GHSA-8867-vpm3-g98g
Python keyring has insecure permissions on new databases allowing world-readable files to be created
Priority LOW 28
Python keyring has insecure permissions on new databases allowing world-readable files to be created
TI-2012-03911 CVE-2012-4571 · GHSA-p3h7-3c45-qj4v
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords…
Priority LOW 11
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.